Pantsel

pantsel

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-34243 1Pantsel 1Konga Jun 17, 2026 May 14, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Konga v0.14.9 is vulnerable to Cross Site Scripting (XSS) via the username parameter.
CVE-2023-39846 1Pantsel 1Konga Jun 17, 2026 Aug 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.